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METHOD FOR STEGA- CIPHER PROTECTION OF COMPUTER CODE 

FIELD OF INVENTION 

With the advent of computer networks and digital 
5 multimedia, protection of intellectual property has 
become a prime concern for creators and publishers of 
digitized copies of copyrightable works, such as musical 
recordings, movies, video games, and computer software. 
One method of protecting copyrights in the digital 

10 domain is to use "digital watermarks," 

The prior art includes copy protection systems 
attempted at many stages in the development of the 
software industry. These may be various methods by 
which a software engineer can write the software in a 

15 clever manner to determine if it has been copied, and if 
so to deactivate itself. Also included are undocumented 
changes to the storage format of the content. Copy 
protection was generally abandoned by the software 
industry, since pirates were generally just as clever as 

2 0 the software engineers and figured out ways to modify 

the software and deactivate the protection. The cost of 
developing such protection was not justified considering 
the level of piracy which occurred despite the copy 
protection. 

25 Other methods for protection of computer software 

include the requirement of entering certain numbers or 
facts that may be included in a packaged software's 
manual, when prompted at start-up. These may be 
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overcome if copies of the manual are distributed to 
unintended users, or by patching the code to bypass 
these measures. Other methods include requiring a user 
to, contact the, software vendor and to receive "keys" for 
5 unlocking software after registration attached to some 
payment scheme, such as credit card authorization. 
Further methods include network-based searches of a 
user' s hard drive and comparisons between what is 
registered to that user and what is actually installed 

10 on the user's general computing device. Other 

proposals, by such parties as AT&T's Bell Laboratories, 
use "kerning" or actual distance in pixels, in the 
rendering of text documents, rather than a varied number 
of ASCII characters. However, this approach can often 

15 be defeated by graphics processing analogous to sound 
processing, which randomizes that information. All of 
these methods require outside determination and 
verification of the validity of the software license. 
Digital watermarks can be used to mark each 

2 0 individual copy of a digitized work with information 
identifying the title, copyright holder, and even the 
licensed owner of a particular copy. When marked with 
licensing and ownership information, responsibility is 
created for individual copies where before there was 

2 5 none. Computer application programs can be watermarked 

by watermarking digital content resources used in 
conjunction with images or audio data. Digital 
watermarks can be encoded with random or pseudo random 
keys, which act as secret maps for locating the 

3 0 watermarks. These keys make it impossible for a party 

to find the watermark without having the key. In 
addition, the encoding method can be enhanced to force a 
party to cause damage to a watermarked data stream when 
trying to erase a random- key watermark. Digital 
3 5 watermarks are described in "Steganographic Method and 
Device" - The DICE Company, Serial No. 08/489,172, the 
disclosure of which is hereby incorporated by reference. 
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Other information is disclosed in "Technology; Digital 
Commerce" , Denise Caruso, New York Times, August 7, 
1995; and "Copyrighting in the Information Age", Harley 
Ungar, ONLINE MARKETPLACE , September 1995, Jupiter 
5 Communications. 

Additionally, other methods for hiding information 
signals in content signals, are disclosed in U.S. Patent 
No. 5,319,735 - Preuss et al . and U.S. Patent No. 
5,379,345 - Greenberg . 

10 It is desirable to use a "stega-cipher " or 

watermarking process to hide the necessary parts or 
resources of the executable object code in the digitized 
sample resources. It is also desirable to further 
modify the underlying structure of an executable 

15 computer application such that it is more resistant to 
attempts at patching and analysis by memory capture. A 
computer application seeks to provide a user with 
certain utilities or tools, that is, users interact with 
a computer or similar device to accomplish various tasks 

2 0 and applications provide the relevant interface. Thus, 

a level of authentication can also be introduced into 
software, or "digital products," that include digital 
content, such as audio, video, pictures or multimedia, 
with digital watermarks. Security is maximized because 
25 erasing this code watermark without a key results in the - 
destruction of one or more essential parts of the 
underlying application, rendering the "program" useless 
to the unintended user who lacks the appropriate key. 
Further, if the key is linked to a license code by means 

3 0 of a mathematical function, a mechanism for identifying 

the licensed owner of an application is created. 

It is also desirable to randomly reorganize program 
memory structure intermittently during program run time, 
to prevent attempts at memory capture or object code 
35 analysis aimed at eliminating licensing or ownership 
information, or otherwise modifying, in an unintended 
manner, the functioning of the application. 
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In this way, attempts to capture memory to 
determine underlying functionality or provide a "patch" 
to facilitate unauthorized use of the "application," or 
computer program, without destroying the functionality 
5 and thus usefulness of a copyrightable' computer program 
can be made difficult or impossible. 

It is thus the goal of the present invention to 
provide a higher level of copyright security to object 
code on par with methods described in digital 

10 watermarking systems for digitized media content such as 
pictures, audio, video and multimedia content in its 
multifarious forms, as described in previous 
disclosures, "Steganographic Method and Device" and 
"Human Assisted Random Key Generation and Application 

15 for Digital Watermark System", filed on even date 

herewith, the disclosure of which is hereby incorporated 
by reference. 

It is a further goal of the present invention to 
establish methods of copyright protection that can be 
20 combined with such schemes as software metering, network 
distribution of code and specialized protection of 
software that is designed to work over a network, such 
as that proposed by Sun Microsystems in their HotJava 
browser and Java programming language, and manipulation 
25 of application code in proposed distribution of 

documents that can be exchanged with resources or the 
look and feel of the document being preserved over a 
network.. Such systems are currently being offered by 
companies including Adobe, with their Acrobat software. 
This latter goal is accomplished primarily by means of 
the watermarking of font, or typeface, resources 
included in applications or documents, which determine 
how a bitmap representation of the document is 
ultimately drawn on a presentation device. 

The present invention includes an application of 
the technology of "digital watermarks." As described 
in previous disclosures, "Steganographic Method and 
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Device" and "Human Assisted Random Key Generation and 
Application for Digital Watermark System, M watermarks 
are particularly suitable to the identification, 
metering, distributing and authenticating digitized 
5 content such as pictures, audio, video and derivatives 
thereof under the description of "multimedia content." 
Methods have been described for combining both 
cryptographic methods, and steganography , or hiding 
something in plain view. Discussions of these 

10 technologies can be found in Applied Cryptography by 

Bruce Schneier and The Code Breakers by David Kahn. For 
more information on prior art public-key cryptosystems 
see US Pat No 4,200,770 Dif f ie-Hellman, 4,218,582 
Hellman, 4,405,829 RSA, 4,424,414 Hellman Pohlig. 

15 Computer code, or machine language instructions, which 
are not digitized and have zero tolerance for error, 
must be protected by derivative or alternative methods, 
such as those disclosed in this invention, which focuses 
on watermarking with "keys" derived from license codes 

20 or other ownership identification information, and using 
the watermarks encoded with such keys to hide an 
essential subset of the application code resources. 

SUMMARY OF THE INVENTION 

25 It: is thus a goal of the present invention, to 

provide a level of security for executable code on 
similar grounds as that which can be provided for 
digitized samples. Furthermore, the present invention 
differs from the prior art in that it does not attempt 

3 0 to stop copying, but rather, determines responsibility 
for a copy by ensuring that licensing information must 
be preserved in descendant copies from an original. 
Without the correct license information, the copy cannot 
function. 

35 An improvement over the art is disclosed in the 

present invention, in that the software itself is a set 
of commands, compiled by software engineer, which can be 
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configured in such a manner as to tie underlying 
functionality to the license or authorization of the 
copy in possession by the user. Without such 
verification, the functions sought out by the user in 
5 the form of software cease to properly work. Attempts 
to tamper or "patch" substitute code resources can be 
made highly difficult by randomizing the location of 
said resources in memory on an intermittent basis to 
resist most attacks at disabling the system! 

10 

DETAILED DESCRIPTION 

An executable computer program is variously 
referred to as an application, from the point of view of 
a user, or executable object code from the point of view 
15 of the engineer. A collection of smaller, atomic (or 
indivisible) chunks of object code typically comprise 
the complete executable object code or application which 
may also require the presence of certain data resources • 
These indivisible portions of object code correspond 

2 0 with the programmers' function or procedure 

implementations in higher level languages, such as C or 
Pascal. In creating an application, a programmer writes 
"code" in a higher level language, which is then 
compiled down into "machine language," or, the 
25 executable object code, which can actually be run by a 
computer, general purpose or otherwise. Each function, 
or procedure, written in the programming language, 
represents a self-contained portion of the larger 
program, and implements, typically, a very small piece 

3 0 of its functionality. The order in which the programmer 

types the code for the various functions or procedures, 
and the distribution of and arrangement of these 
implementations in various files which hold them is 
unimportant. Within a function or procedure, however, 
3 5 the order of individual language constructs, which 
correspond to particular machine instructions is 
important, and so functions or procedures are considered 
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indivisible for purposes of this discussion. That is, 
once a function or procedure is compiled, the order of 
the machine instructions which comprise the executable 
object code of the function is important and their order 
5 in the computer memory is of vital importance. Note 
that many "compilers" perform "optimizations" within 
functions or procedures, which determine, on a limited 
scale, if there is a better arrangement for executable 
instructions which is more efficient than that 

10 constructed by the programmer, but does not change the 
result of the function or procedure. Once these 
optimizations are performed, however, making random 
changes to the order of instructions is very likely to 
"break" the function. When a program is compiled, then, 

15 it consists of a collection of these sub-objects, whose 
exact order or arrangement in memory is not important, 
so long as any sub-object which uses another sub-object 
knows where in memory it can be found. 

The memory address of the first instruction in one 

20 of these sub-objects is called the "entry point" of the 
function or procedure. The rest of the instructions 
comprising that sub-object immediately follow from the 
entry point. Some systems may prefix information to the 
entry point which describes calling and return 

25 conventions for the code which follows, an example is 
the Apple Macintosh Operating System (MacOS) . These 
sub-objects can be packaged into what are referred to in 
certain systems as "code resources," which may be stored 
separately from the application, or shared with other 

3 0 applications, although not necessarily. Within an 

application there are also data objects, which consist 
of some data to be operated on by the executable code. 
These data objects are not executable. That is, they do 
not consist of executable instructions. The data 

35 objects can be referred to in certain systems as 
"resources , " 
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When a user purchases or acquires a computer 
program, she seeks a computer program that "functions" 
in a desired manner. Simply, computer software is 
overwhelmingly purchased for its underlying 
5 functionality. In contrast, persons who copy multimedia 
content, such as pictures, audio and video, do so for 
the entertainment or commercial value of the content. 
The difference between the two types of products is that 
multimedia content is not generally interactive, but is 

10 instead passive, and its commercial value relates more 
on passive not interactive or utility features, such as 
those required in packaged software, set -top boxes, 
cellular phones, VCRs, PDAs , and the like. Interactive 
digital products which include computer code may be 

15 mostly interactive but can also contain content to add 
to the interactive experience of the user or make the 
underlying utility of the software more aesthetically 
pleasing. It is a common concern of both of these 
creators, both of interactive and passive multimedia 

2 0 products, that "digital products" can be easily and 

perfectly copied and made into unpaid or unauthorized 
copies. This concern is especially heightened when the 
underlying product is copyright protected and intended 
for commercial use. 
25 T he first method of the present invention described 

involves hiding necessary "parts" or code "resources" in 
digitized sample resources using a "digital 
watermarking" process, such as that described in the 
"Steganographic Method and Device" patent application. 

3 0 The basic premise for this scheme is that there are a 

certain sub-set of executable code resources, that 
comprise an application and that are "essential" to the 
proper function of the application. In general, any 
code" resource can be considered "essential" in that if 
3 5 the program proceeds to a point where it must "call" the 
code resource and the code resource is not present in 
memory, or cannot be loaded, then the program fails. 
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However, the present invention uses a definition of 
"essential" which is more narrow. This is because, 
those skilled in the art or those with programming 
experience, may create a derivative program, not unlike 
5 the utility provided by the original program, by writing 
additional or substituted code to work around 
unavailable resources. This is particularly true with 
programs that incorporate an optional "plug- in 
architecture, M where several code resources may be made 

10 optionally available at run-time. The present invention 
is also concerned with concentrated efforts by 
technically skilled people who can analyze executable 
object code and "patch" it to ignore or bypass certain 
code resources. Thus, for the present embodiment's 

15 purposes, "essential" means that the function which 
distinguishes this application from any other 
application depends upon the presence and use of the 
code resource in question. The best candidates for this 
type of code resources are NOT optional, or plug- in 

20 types, unless special care is taken to prevent work-a- 
rounds . 

Given that there are one or more of these essential 
resources, what is needed to realize the present 
invention is the presence of certain data resources of a 

25 type which are amenable to the "stega-cipher " process 
described in the "Steganographic Method and Device" 
patent application. Data which consists of image or 
audio samples is particularly useful. Because this data 
consists of digital samples, digital watermarks can be 

3 0 introduced into the samples. What is further meant is 
that certain applications include image and audio 
samples which are important to the look and feel of the 
program or are essential to the processing of the 
application's functionality when used by the user. 

3 5 These computer programs are familiar to users of. 
computers but also less obvious to users of other 
devices that run applications that are equivalent in 
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some measure of functionality to general purpose 
computers including, but not limited to, set -top boxes, 
cellular phones, "smart televisions," PDAs and the like. 
However, programs still comprise the underlying 
5 "operating systems" of these devices and are becoming 
more complex with increases in functionality. 

One method of the present invention is now 
discussed. When code and data resources are compiled 
and assembled into a precursor of an executable program 
10 the next step is to use a utility application for final 
assembly of the executable application. The programmer 
marks several essential code resources in a list 
displayed by the utility. The utility will choose one 
or several essential code resources, and encode them 
15 into one or several data resources using the stega- 
cipher process. The end result will be that these 
essential code resources are not stored in their own 
partition, but rather stored as encoded information in 
data resources. They are not accessible at run-time 
2 0 without the key. Basically, the essential code 

resources that provide functionality in the final end- 
product, an executable application or computer program, 
are no longer easily and recognizably available for 
manipulation by those seeking to remove the underlying 
2 5 copyright or license, or its equivalent information, or 
those with skill to substitute alternative code 
resources to "force" the application program to run as 
an unauthorized copy. For the encoding of the essential 
code resources, a "key" is needed. Such a key is 
similar to those described in the "Steganographic Method 
and Device." The purpose of this scheme is to make a 
particular licensed copy of an application 
distinguishable from any other. It is not necessary to 
distinguish every instance of an application, merely 
every instance of a license. A licensed user may then 
wish to install multiple copies of an application, 
legally or with authorization. This method, then, is to 
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choose the key so that it corresponds, is equal to, or 
is a function of, a license code or license descriptive 
information, not just a text file, audio clip or 
identifying piece of information as desired in digital 
5 watermarking schemes extant and typically useful to 
stand-alone, digitally sampled content. The key is 
necessary to access the underlying code, i.e., what the 
user understands to be the application program. 

The assembly utility can be supplied with a key 

10 generated from a license code generated for the license 
in question. Alternatively, the key, possibly random, 
can be stored as a data resource and encrypted with a 
derivative of the license code. Given the key, it 
encodes one or several essential resources into one or 

15 several data resources. Exactly which code resources 
are encoded into which data resources may be determined 
in a random or pseudo random manner. Note further that 
the application contains a code resource which performs 
the function of decoding an encoded code resource from a 

20 data resource. The application must also contain a data 
resource which specifies in which data resource a 
particular code resource is encoded. This data resource 
is created and added at assembly time by the assembly 
utility. The application can then operate as follows: 

25 D when it is run for the first time, after 

installation, it asks the user for personalization 
information, which includes the license code. This can 
include a particular computer configuration; . 

2) it stores this information in a personalization 
3 0 data resource; 

3) Once it has the license code, it can then 
generate the proper decoding key to access the essential 
code resources . 

Note that the application can be copied in an 
3 5 uninhibited manner, but must contain the license code 
issued to the licensed owner, to access its essential 
code resources. The goal of the invention, copyright 
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protection of computer code and establishment of 
responsibility for copies, is thus accomplished. 

This invention represents a significant improvement 
over prior art because of the inherent difference in use 
5 of purely informational watermarks versus watermarks 

which contain executable object code. If the executable 
object code in a watermark is essential to an 
application which accesses the data which contains the 
watermark, this creates an all-or-none situation. 

10 Either the user must have the extracted watermark, or 
the application cannot be used, and hence the user 
cannot gain full access to the presentation of the 
information in the watermark bearing data. In order to 
extract a digital watermark, the user must have a key. 

15 The key, in turn, is a function of the license 

information for the copy of the software in question. 
The key is fixed prior to final assembly of the 
application files, and so cannot be changed at the 
option of the user. That, in turn, means the license 

2 0 information in the software copy must remain fixed, so 

that the correct key is available to the software. The 
key and the license information are, in fact, 
interchangeable. One is merely more readable than the 
other. In the earlier developed " Steganographic Method 
25 and Device, " the possibility of randomization erasure 

attacks on digital watermarks was discussed. Simply, it 
is always possible to erase a digital watermark, 
depending. on how much damage you are willing to do to 
the watermark -bearing content stream. The present 

3 0 invention has the significant advantage that you must 

have the watermark to be able to use the code it 
contains. If you erase the watermark you have lost a 
key piece of the functionality of the application, or 
even the means to access the data which bear the 
3 5 watermark. 

A preferred embodiment would be implemented in an 
embedded system, with a minimal operating system and 
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memory. No media playing "applets," or smaller sized 
applications as proposed in new operating environments 
envisioned by Sun Microsystems and the advent of Sun's 
Java operating system, would be permanently stored in 
5 the system, only the bare necessities to operate the 
device, download information, decode watermarks and 
execute the applets contained in them. When an applet 
is finished executing, it is erased from memory. Such a 
system would guarantee that content which did not 

10 contain readable watermarks could not be used. This is 
a powerful control mechanism for ensuring that content 
co be distributed through such a system contains valid 
watermarks. Thus, in such networks as the Internet or 
set -top box controlled cable systems, distribution and 

15 exchange of content would be made more secure from 

unauthorized copying to the benefit of copyright holders 
and other related parties. The system would be enabled 
to invalidate, by default, any content which has had its 
watermark (s) erased, since the watermark conveys, in 

20 addition to copyright information, the means to fully 
access, play, record or otherwise manipulate, the 
content . 

A second method according to the present invention 
is to randomly re-organize program memory structure to 

25 prevent attempts at memory capture or object code 
analysis. The object of this method is to make it 
extremely difficult to perform memory capture-based 
analysis of an executable computer program. This 
analysis is the basis for a method of attack to defeat 

30 the system envisioned by the present invention. 

Once the code resources of a program are loaded 
into memory, they typically remain in a fixed position, 
unless the computer operating system finds it necessary 
to rearrange certain portions of memory during "system 

35 time," when the operating system code, not application • 
code, is running. Typically, this is done in low memory 
systems, to maintain optimal memory utilization. The 
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MacOS for example, uses Handles, which are double - 
indirect pointers to memory locations, in order to allow 
the operating system to rearrange memory transparently, 
underneath a running program. if a computer program 
5 contains countermeasures against unlicensed copying, a 
skilled technician can often take a snapshot of the code 
in memory, analyze it, determine which instructions 
comprise the countermeasures, and disable them in the 
stored application file, by means of a "patch." Other 
applications for designing code that moves to prevent 
scanning -tunnelling microscopes, and similar high 
sensitive hardware for analysis of electronic structure 
of microchips running code, have been proposed by such 
parties as Wave Systems. Designs of Wave Systems' 
microchip are intended for preventing attempts by 
hackers to "photograph" or otherwise determine "burn in" 
to microchips for attempts at reverse engineering. The 
present invention seeks to prevent attempts at 
understanding the code and its organization for the 
20 purpose of patching it. Unlike systems such as Wave 
Systems', the present invention seeks to move code 
around in such a manner as to complicate attempts by 
software engineers to reengineer a means to disable the 
methods for creating licensed copies on any device that 

2 5 lacks "trusted hardware." Moreover, the present 

invention concerns itself with any application software 
that may be used in general computing devices, not 
chipsets that are used in addition to an underlying 
computer to perform encryption. Wave Systems' approach 
to security of software, if interpreted similarly to the 
present invention, would dictate separate microchip sets 
for each piece of application software that would be 
tamperproof. This is not consistent with the economics 
of software and its distribution. 

3 5 Under the present invention, the application 

contains a special code resource which knows about all 
the other code resources in memory. During execution 
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time f this special code resource, called a "memory 
scheduler, " can be called periodically, or at random or 
pseudo random intervals, at which time it intentionally 
shuffles the other code resources randomly in memory, so 
5 that someone trying to analyze snapshots of memory at 
various intervals cannot be sure if they are looking at 
the same code or organization from one "break" to the 
next. This adds significant complexity to their job. 
The scheduler also randomly relocates itself when it is 

10 finished. In order to do this, the scheduler would have 
to first copy itself to a new location, and then ■ 
specifically modify the program counter and stack frame, 
so that it could then jump into the new copy of the 
scheduler, but return to the correct calling frame. 

15 Finally, the scheduler would need to maintain a list of 
all memory addresses which contain the address of the 
scheduler, and change them to reflect its new location. 

The methods described above accomplish the purposes 
of the invention - to make it hard to analyze captured 

20 memory containing application executable code in order 
to create an identifiable computer program or 
application that is different from other copies and is 
less susceptible to unauthorized use by those attempting 
to disable the underlying copyright protection system. 

25 Simply, each copy has particular identifying information 
making that copy different from all other copies. 
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What is Claimed Ts : 



11. A method of associating executable object code with 

2 a digital sample stream by means of a digital watermark 

3 wherein the digital watermark contains executable object 

4 code and is encoded into the digital sample stream. 

1 2. The method of claim 1 wherein a key to access the 

2 digital watermark is a function of a collection of 

3 license information pertaining to the software which is 

4 accessing the watermark 

5 where license information consists of one or more 

6 of the following items: 

7 Owning Organization name; 

8 Personal Owner name; 

9 Owner Address; 

10 License code; 

11 Software serialization number; 

12 Distribution parameters; 

13 Appropriate executable general computing 

14 device architecture; 

15 Pricing; and 

16 Software Metering details. 

1 3 . The method of claim 1 further comprising the step 

2 of transmitting the digital sample stream, via a 

3 transmission means, from a publisher to a subscriber 

4 wherein transmission means can selected from the 

5 group of 

6 soft sector magnetic disk media; 

7 hard sector magnetic disk media; 

8 magnetic tape media; 

9 optical disc media; 

10 Digital Video Disk media; 

11 magneto-opt ical disk media; 

12 memory cartridge; 

13 telephone lines; 
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14 SCSI; 

15 Ethernet or Token Ring Network; 

16 ISDN; 

17 ATM network; 

18 . TCP/IP network; 

19 analog cellular network; 

20 digital cellular network; 

21 wireless network; 

22 digital satellite; 

23 cable network; 

24 fiber optic network; and 

25 electric powerline network. 

1 4. The method of claim 1 where the object code to be 

2 encoded is comprised of series of executable machine 

3 instructions which perform the function of 

4 processing a digital sample stream for the purpose 

5 of modifying it or playing the digital sample stream. 

1 5. The method of claim 3 further comprising the steps 

2 of: 

3 decoding said digital watermark and extracting 



4 object code; 

5 loading object code into computer memory for the 

6 purpose of execution; 

7 executing said object code in order to process said 

8 digital sample stream for the purpose of playback. 

16. A method of assembling an application to be 

2 protected by watermark encoding of essential resources 

3 comprising the steps of: 

4 assembling a list of identifiers of essential 

5 code resources of an application where identifiers allow 

6 the code resource to be accessed and loaded into memory; 

7 providing license information on the 

8 licensee who is to receive an individualized copy of the 

9 application; 
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10 storing license information in a 

11 personalization resource which is added to the list of 

12 application data resources; 

13 > ..generating a digital watermark key from 

14 the license information; using the key as a pseudo- 

15 random number string to select a list of suitable 

16 digital sample data resources, the list of essential 

17 code resources, and a mapping of which essential code 

18 resources are to be watermarked into which data 

19 resources; 

20 storing the map, which is a list of 

21 paired code and data resource identifiers, as a data 

22 resource, which is added to the application; 

23 adding a digital watermark decoder code 

24 resource to the application, to provide a means for 

25 extracting essential code resource from data resources, 
2 6 according to the map; 

27 processing the map list and encoding 

28 essential code resources into digital sample data 
2 9 resources with a digital watermark encoder; 

30 removing self-contained copies of the 

31 essential code resources which have been watermarked 

32 into data resources; and 

33 combining all remaining code and data 

34 resources into a single application or installer. 

17. a method of intermittently relocating application 

2 code resources in computer memory, in order to prevent, 

3 discourage, or complicate attempts at memory capture 

4 based code analysis. 

1 8. The method of claim 7 additionally comprising the 

2 step of 

3 assembling a list of identifiers of code resources 

4 of an application where identifiers allow the code 

5 resource to be accessed and loaded into memory. 
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1 9 . The method of claim 8 additionally comprising the 

2 step of modifying application program structure to make 

3 all code resource calls indirectly, through the memory 

4 scheduler, which looks up code resources in its list and 

5 dispatches calls. 

1 10 . The method of claim 9 additionally comprising the 

2 step of intermittently rescheduling or shuffling all 

3 code resources prior to or following the dispatch of a 

4 code resource call through the memory scheduler. 

1 11. The method of claim 10 additionally comprised of 

2 the step of the memory scheduler copying itself to a new 

3 location in memory. 

1 12. The method of claim 11 additionally comprising the 

2 step of modifying the stack frame, program counter, and 

3 memory registers of the CPU to cause the scheduler to 

4 jump to the next instruction comprising the scheduler, 

5 in the copy, to erase the previous memory instance of 

6 the scheduler, and changing all memory references to the 

7 scheduler to reflect its new location, and to return 

8 from the copy of the scheduler to the frame which called 

9 the previous copy of the scheduler. 
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